Security Vulnerabilities
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.004
Published
2026-08-07
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.004
Published
2026-08-07
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
8.7
EPSS Score
0.004
Published
2026-08-07
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.006
Published
2026-08-07
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
9.3
EPSS Score
0.004
Published
2026-08-07
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.009
Published
2026-08-07
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
CVSS Score
9.6
EPSS Score
0.004
Published
2026-08-07
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.005
Published
2026-08-07
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.006
Published
2026-08-07
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.005
Published
2026-08-07